CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78987

A flaw was found in Google Chrome. A remote attacker could exploit an information leak in the Canvas component by crafting a malicious HTML page. This vulnerability allows the attacker to bypass the web origin policy, potentially leading to unauthorized access to sensitive information...

CVE-2026-79185

A flaw was found in the Document Object Model DOM in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to bypass the web origin policy and potentially access...

CVE-2026-79154

A flaw was found in chromium-browser. This missing authorization vulnerability in DevTools allows a remote attacker to exploit the system. By leveraging social engineering and user interface interaction, an attacker can obtain sensitive information...

CVE-2026-79176

A flaw was found in Google Chrome. This user interface UI misrepresentation in the Extensions feature allows a remote attacker to leverage social engineering techniques. By tricking a user into installing a specially crafted Chrome extension, the attacker can obtain sensitive information from the...

CVE-2026-79104

A flaw was found in Google Chrome. Missing authorization in the Sensor component could allow a remote attacker, who has already compromised the renderer process, to obtain sensitive information. This exploitation occurs when the attacker provides a specially crafted HTML page, leading to...

CVE-2026-79141

A flaw was found in Google Chrome Browser. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions within the browser...

WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by doyz in WordPress Plugin SureFeedback Client Site versions = 1.2.12...

CVE-2026-19632

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

EUVD-2026-66230

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

CVE-2026-19632

The TranslatePress – Translate Multilingual sites with AI Translation WordPress plugin (versions ≤ 3.3.1 ) is vulnerable to Sensitive Information Exposure via the trp_get_translations_regular AJAX action. This flaw allows unauthenticated attackers to extract raw administrator password-reset URLs ...

EUVD-2026-66748

AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-78991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-79265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged soci...

Linux Distros Unpatched Vulnerability : CVE-2026-79234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-79253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak...

Linux Distros Unpatched Vulnerability : CVE-2026-79271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a...

Linux Distros Unpatched Vulnerability : CVE-2026-79287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-79288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a...

Linux Distros Unpatched Vulnerability : CVE-2026-79076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic...